CVE-2023-49074: tp-link ac1350 wireless mu-mimo gigabit access point (eap225 v3) Exposed Dangerous Method or Function

Vulnerability summary

CVE-2023-49074 is a high (CVSS 7.5) Exposed Dangerous Method or Function vulnerability in tp-link ac1350 wireless mu-mimo gigabit access point (eap225 v3). EPSS estimates a 13.48% chance of exploitation in the next 30 days, higher than 96.4% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 09-04-2024
   PublishedVulnerability first disclosed.
2. 04-11-2025
   Last modifiedVulnerability information updated.

Description

A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.

• CWE-749Exposed Dangerous Method or FunctionThe product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.